Skillv1.0.0

ClawScan security

Mood Canvas · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 14, 2026, 9:59 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is an instruction-only brief generator for visual mood boards; its requested resources and instructions align with that purpose and it doesn't request credentials, install anything, or perform risky operations.
Guidance: This skill is low-risk and internally consistent: it only contains instructions and an output template to turn a mood idea into a visual brief, and it doesn't request credentials or install code. Before installing, consider: (1) the skill source is unknown (no homepage/author info) — if provenance matters to you, prefer skills from known publishers; (2) the outputs may include references or phrasing that could approach copyrighted works if you request close imitation of a named artist/film — avoid prompts that ask for exact replicas of copyrighted images or licensed likenesses; (3) test it with non-sensitive, non-confidential prompts first to confirm the quality and behavior. Otherwise it appears coherent and proportionate for the described purpose.

Purpose & Capability: okName and description (visual mood-boarding / creative brief) match the content of SKILL.md and the included output template. No unrelated binaries, credentials, or config paths are requested.
Instruction Scope: okRuntime instructions are limited to asking the user for creative constraints and producing a structured brief. The SKILL.md references the included output template only; it does not instruct reading system files, environment variables, or sending data to external endpoints.
Install Mechanism: okNo install spec and no code files—this is instruction-only, so nothing is written to disk or downloaded by the skill.
Credentials: okThe skill requires no environment variables, credentials, or config paths. The requested scope of access is minimal and proportional to the stated purpose.
Persistence & Privilege: okalways:false and no special privileges. The skill does not request persistent system presence or modify other skills or global agent settings.